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The eamend is noi; to ha denied: every jump r:.v< be 
tan-:ud from, our deduction;.' That il is hard to satisfy 
tcuou be set down to the tediousness of proceeding step 
fcy step , Every proof which is even a lilt he compli¬ 
cated threatens to become inordinately long, [Hi] 

Gi Frete. '884 


This general -ieebce for tiger has persisted since that tine, and a great 
deal has been termed about formal methods> But, for the reason noted 
by Frege, very 1. cfcle of. real mathematics has been done with full formal 
treatment ., Our present hope is to use computers to take the drudgery 
out of formal das sanstrat ions, just as they are taking it out of account¬ 


ing ■ 

Toward this end, several programs are under way They vary in pur* 
pose; the Proof'd ecker {1(3, 119] is to be capable of filling the gaps of 
s proof; the work of Mott et, al, iHlO’f elms to achieve the equivalent 
o£ a deck calculator ability as an aid to a saaths.saati.cian doing formal 


proofs ■; 

The ur-st intriguing prospect, however, is that t ossputera can even* 
iy be ’t, 4 .d'- ic b'th device and prove interesting non-trivial theorrents 
v, holly Oil tile r com The first of theca desires, the invention of inter 
cs .ir.g aonjeoTuti-s, has out even been attempted., L believe, however, 
eh; ; fc re Mac: verge o? achieving the second of those ends, the 
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meehonical proof of con-trivial theorems, a belief which * lope 1 ecu 
jvsiizy in the sequel« 


i. Th e H istcT ica . i De velopme nt of Mechanical T heo-'cra Roving 

This section discusses the relationship between -.he f:v?o separata 
approaches vfoich have been taken toward mechanical theorem proving • 

He will not discuas the relatively trivial history of f •'logic machines” 
that are based on switching models of Boolean Algebra [M2], The first 
significant approach, which l will terra '*subgoal reduetio:i M , was ini¬ 
tiated by the work of Hewell, Shaw and Simon described in the Logic 
Theory Machine papers (LTM) [HI, 32 ]» The other approach depends on a 
theorem due to Herbracd [L3], This work is typified by the programs 
of Gilmore [P2j, Wang [P3, P4, P5j, and Uavis and putsiaia [?3, P9], I 
will call this the ’’Herbracd expansion" approach,, 


1„1„ Herbrand Expansion Method 

The theorem of Herbrand alluded to above yields a proof procedure 
for quantification theory (first order/lower predlcato/functicmal calculus), 

A proof procedure is an algorithm which can provide a proof for a formula 

which is valid, but may not terminate if the formula is not valid, (A 

vali d formula is true no matter what predicates are substituted for its 

predicate variables.) Unfortunately, it is hopeless to search for an i 

algorithm which will distinguish unfailingly between theorems and non - 

theorems, since quantification theory is undecidable. 


1. 1.1 Some Farms .! Isa 

‘ will net? describe the system of notation for quantification theory 
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tc be used; 


1 

Tndiv idix. 

L variables; 

2S» j, 

y- 

*9 . 
w ,5 

U .. V- W, X, 
i 

2 

r, t)C XV X dvU i 

1 constants; 

c., 

b, 

c. 

1 ) 

'i 

Predicate 

vek , 

p s < 

3 , i 

3 , I 

t . c~ ■ .. 

•j .J u.-j , •- <• 


4 function variabless f, 3 , h, ; - 3 - 

Oeffio predicate couxtcefca and function constants will 
A liter al is ra expression of the fom? 



introduced 


Pi A. , A.,i, ,,A i 

1 *"•* u 

or of the fora 


A I £ , Iky a n o A^ j 

where F is a predicate symbol and the are terma % 

A term ie 

i, an individual variable 
2 c an individual constant 
3... an expression of the fora 

${h v A, , ,A a J 

where ^ is a function symbol and the A„ ; are terms,, 

If B. and 3 are wffs, then the following are v eil formed formulae <v£f) 
1 A literal 

2^ (RVS), (*AS),^S),-vR, (EJS) 

3.-, (x)R, (Sx)R 

T will omit, extra parentheses when no confusion will result, and 
sometimes use an individual constant symbol in place of a function of 
no arguments 


1 1,2 . Herb rand ‘ 1 - Theorem 

;l0: brand’s 


theorem defines 


a process which in effect translates a 





formula of quantification theory Into a new formula (nor equivalent to 
the original) which has no quantifiers, which i will call the free var i- 
fbl a fora (fvf) 

The theorem also provides a method of generating an. infinite, hier¬ 
archically •structured set of Individuals, the lierb rand uni verse , which 
are to be substituted for the free variables in the free variable form 
of the formula. 

The proof procedure can be described as follows; 

1, Let us suppose there are n free variable# in the formula. Form 
successive a-tuples of members of the Herbrand universe, exhausting all 
possible combinations of those elements already generated before gener¬ 
ating a new elemert, 

2, Substitute an n-tuple for the variables in the free variable 
form and form the disjunction of this sentence with that already accumu¬ 
lated, 

3, If this formula is a tautology the original theorem is valid, 
if not, then select a new n-tuple and repeat the process. 

Every formula which is valid will result in a tautology after some finite 
number of terms have been accumulated. There is, of course, no effective 
procedure for estimating the number of terns necessary in the general 
case. However, for certain forms of the original formula upper bounds 
can be set; these are the decidable cases. 

The explanation of the Eerbrand proof procedure in Davis and Putnam [P8] 
is far more satisfying intuitively than that which I give here, I recom¬ 
mend that the reader study that paper for the feel it gives for what is 
really going or,. My purpose here is to summarize the process in terms 



* 6 - 


3-, If st is 3 negative variable occurring in R, substitute 

,5t 9 ,x n -,) for it everywhere it occurs. where- i is a 
previously unused function symbol and the x, are all tie vari¬ 
ables -which were bound by a positive quantifier whose scope 
extended over R. 


the resulting fret variable tone of the 
nay have souse new function symbols 


formula ha?- no quant 


am 


1 9 1 0 4 , '." he. llctbr a tid; Universe 

Ths Herbrand universe, 1, is formed from the function symbols and 
individual constants appearing in the free variable fora. Included among 
the individual constants for this purpose are those functions of no argu¬ 
ments which appeal':, If there are no constants of either variety then 

I'll 

tue single constant ”a‘ J is taken- These elements fora the 0 level 

of the hierarchy which t will denote Hq» 

The r + 1 Level, ♦ is the set of all expressions of the form 

K.,where f la a function symbol occurring in the fyf , and the 

K'a are Members of one of the seta By j £ r» and at least one of the 

K/s is of level 

H is just IL „H,, 
j j 

[Hote that H rt> 0 may be empty, I 


1-1.5. Th e Pr oof Pr oc edure Programs 

411 the proof procedure programs described in the 
use essential ly the. method described above: a growing 
sice is generated and tested, The primary difference j 


literature so far 
propcsitiona1 exp re s 
of these programs 




tsi liaore s program qj. so included methods fox recoap.viz5.ng when a for- 
»ul«i was xn certain cecidabie domains aod would compute an upper homed 
to the number of instances of the fvf which must be investigated, U order 
to be able to establish that invalid formulas falling in this cJaea were 
non-theorems. 


I J. :j 5 2 The Da yia»-Putn ata_ Al gorithat 

.Davie and Putnam made a major improvement to proof procedure programs 
IPS, i-9j 0 They deal with the negated fvf in con junct .ve normal form. 
Although somewhat complicated reduction rules are necessary to recognize 
that the propositional formula is false when it is expressed this way, 
the addition oca sew instance of the fvf to the accuiaulsted expression 
doa ' 3Q ‘ t Evolve any mora work than simply “tacking it on". The result¬ 
ing expression is still in conjunctive normal form The reduction rule?., 
while complicated, require a computation time which grws only linearly 
with the length of the expression ■ 


1 15,3c The Program of J , A . Robinson 

No improvement in proof procedures has come to my attention past 
the program of Davis and Putnam, (Note; 1 have not.jet studied the 
p^ers of Joyce Friedman fPll, -?12])„ j. A, Robinson [F10J, while pre 

seating the problem in an enlightening fashion which will be discussed 
fully balm;, really has no heuristic which will speed up or reduce the 
search for a proof. He also proposes a proof procedure which is essen¬ 


tially an unjustified reordering of the usual search (although he doesn't 
seem to realize this)* t will deal more fully with the question of reorder¬ 


ing the search in the next section. 





:ic tjiIX be evident from the examples la she secoed section that proofs 
in the Herbrand theorem form End some more familiar fora such as in a 


natural deduction system axe readily comparable, and Indeed could be trsn 
lated cither one to the other by a suitable (complex but efficient,) algo¬ 
rithm, This feet mas. pointed out by A„# Robinson fFlj, and elaborated 


on by J , A-, Robinsou I'PIOJ, who has written a program which translates 
a Eerbrand Expansion into a deductive proof.. 


This completes my precis of the Eerbrand type programs 0 1 have not 

mentioned several works here, because they are essentially only trivial 
variations of the themes which have been presented* The papers of Wang 
[P3, ?4, PS], however, contain much more than descriptions of proof pro¬ 
cedures, end X recommend that they be read carefully,, 


1,2,4 Sttbgog.l-a.ed- tef ioa Metho d 

in general when embarking on a search it is advisable to choose care¬ 
fully the order in which possibilities are examined, The important ques¬ 
tion of how much time should be spent planning Is one of economics, and 
must be decided on this basis, It is in this matter as to how much effort 
should be alloted to ordering the search that the two groups of machine 
theorem prove**} are at odds. An important point which ia not generally 

recognised is chat the subgoal reduction programs are searching essentially 
the same space as those which take the Eerbrand approach, but spend more 
time deciding where to look next, 

1 2.1- T he L o gie T heory Machine 

The LTM papers {Hi, H2J represent the most significant results so 
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far achieved in the field of artificial intelligence. Three key ideas 
to be found here ure subgoal reduction, list structure programming tech¬ 
nique , and recursive subroutine capability,, Unfortunately the authors' 
logic was unsophisticated, and '£ feel this has caused most logicians 
working in the. machine theorem-proving area to discount the powerful 
techniques of heuristic programming which have sprung from this work, 

HSS seemed to imply that a program that would examine more likely 
proofs of a formula first, would lose cognisance of some possible proof 
sequences and cease to be a proof procedure» Indeed, their program did 
have this property, not because they used search reducing heuristics but 
because their ad hoc logic was incomplete. From a practical standpoint 
the whole issue is immaterial since computer limitations prevent any 
program from being a true proof procedure, 

1,2,1,1, SubEoal Reduction 

The LTM, a program to prove theorems in propositional calculus, 
uses the technique of separating a problem into pieces and attacking 
each in the same fashion as the whole. Eventually, it is hoped, the 
problem will be reduced to a large number of "atomic" problems which the 
machine can deal with as wholes, This is the process I call subgoal 
reduction . 

The LTM uses five axioms and three rules of inference* The latter 

are? 

1, Substitutions any proposition may be substituted for a propos¬ 
itional variable, 

2, Replacement; an expression may be replaced by its definition, 

3, Mod u s-poaens ; from p and pt>q infer q. 
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Actually, instead of (3) they use ''chaining", a aetatheorera baaed on (3), 

1 , 2,1 2 Working Backwards 

In the LTM the initial goal is the formula to be proved, and the 
method of reducing the problem to pieces is to find one or two axioms 
ox previously proved theorems which can be transformed into the problem 
at hand by one of the three rules of inference* l/pon application of 
modus ponens the (.remise usually becomes a new subgoal, The process 
begins with the conclusion of the theorem as the initial problem and ends 
with atomic problems which are axioms and premises; thus it la termed 
working backwards * . . 

lo2ol: 3o Matching 

The process of working backwards requires that a means be available 
to determine whether a formula is an instance of some schema, LTM 
employed a matching process for this purpose. This is a recursive search 
procedure which will determine what substitutions must be made for vari¬ 
ables in the schema to convert it to the specific formula desired, 

1.2,2, G-elemter's Geometer 

Gelernter's geometry program's [H4» H5, H6J overall organisation 
is the same as the LTM, It uses all the techniques described above which 
were developed for the LTM, such as subgoal reduction and working back¬ 
ward, It eventually proved moderately difficult theorems at the level 
of high school geometry. 

From a private discussion with Gelemter, X have the impression that 
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the: program utilises what is equivalent to a negation*aad-quautifier- 
£re<j logic,, (a system in which neither denials nor quantifiers appear, 
but with the interpretation tliat free variables be regarded as univer¬ 
sally quantified.,) The fact that certain statements are not expres¬ 
sible in this calculus is reflected in a limitation on the kinds of 
proof methods which Galernter'a program can use,, For example, it can¬ 
not make a reductio ad abaurdtm argument., 

1,22,1, The Diagram 

The most important heuristic included in Gslernter'a program (due 
to Minsky) was the Interpretation of formulae in an example diagrams 
Since most false propositions in geometry are false in a specific example 
(ouch as the proposition "Two arbitrary lines form a right angle"), an 
invalid modus ponens step (p c >q where p is false) can be eliminated as 
a means of deriving q without searching for a proof of Its premise, 
simply by consulting the diagram. 

This principle can be extended to other domains of theorem proving 
besides logic,, A„ Robinson proposes a theorem prover in number theory 
[H7] which tries out a number of instances of a proposed formula to 
attempt to refute it before trying to prove it a This process could have 
been applied as a heuristic in Lift, where the machine could have been 

assigned random truth values to propositional variables, and evaluated 
the resulting Boolean expressions in an attempt to refute an inference, 
indeed, this might be a good heuristic to add in Davis and Putnam's 

proof procedure programs 
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1 >2*22o Tree Trialeg Heuristics 

The subgoal reduction method of problem solving generates & branch¬ 
ing tree structure of subproblems» called the goal true , whose extremities 
represent atomic problems u Sometimes whole limbs of this tree can be 
eliminated because for some reason they really don’t help to solve the 
problem.. There are several techniques for rinding the redundant goals; 
these are called "tree pruning 1 ’ heuristics * 

U2 ,2 2,1„ Interpretation of the Goal Tree as a Propositional Formula 
The intermediate branch points of the goal tree indicate an "and" 
or an "or" type relation; i„e<», all the subproblems emlnating from an 
"and” branch must be solved to achieve the goal for which the branch 
point stands* whereas only a single subproblem’s solution suffices for 
the achievement of "or” branch points., 

This similarity between goal tree and logical relations suggests 
interpreting the goal tree as a propositional formulae 

A propositional variable corresponding to each goal at the tip of 
a branch is to stand for the proposition that that goal has been achieved 
and the propositions "and” and "or" are to have their normal interprets* 
tionoo If the propositional expression so derived can be shown to be 
true* then the goal at the root of the tree is achievable s 

Certain algebraic transformations on the propositional formula 
correspond to simplifying the goal tree.. 

These simplifications consist of the elimination s£ goals which are 


redundant. For example, if the goal tree iss 
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A 

C 

than the* srooosiis iona5. fornuia corresponding to the tree is 3 v AC v C - 
This can be simplified fco B^C.. In this case., a is a redundant goal , 

The problem of eliminating redundant literals la n prepositional esprea-- 

cion involves finding the prime imp lienets of a xortmla. and is treated 
in the switching circuit literature {143* M4„ M5]» 

Golorafcer v a program uses these Boolean function taduct lotto on his 
goal tree (though without recognising this nice interpretation), 

A great number of comparisons need to be made to recognize the 
simplifications,, In general some problems which require little effort 
for their straightforward eolation will not warrant the search to see 
if they are redundant* 

1-2,2,2» 2 , Sy ntactic Symmetr y 

The notion of syntactic symmetry is a valuable heuristic used in 
Gelernter’s program* It is a formalisation of the informal "and such- 
and-such follows similarly”., 

A syntactic symmetry is a permutation operator on the names of the 
variables in a formis which leaves the formula unchanged except for 
rearrangement., If it is a syntactic symmetry of H then k(H) ~~ (H) is 
valid,, The utility of this concept depends on this theorems if K is 
provable from !.■ and a Is a syntactic symmetry of E then a(K) is also 
provable from E. 



Having once computed x and proved the theorem 
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3 3rt(K) is free. 

IS let run unchecked a problem solving program might well be expected 
to eventually generate P, or some formula which is syntactically symmetric 
to P, as a subgoal in establishing P. The program would probably then 
waste a lot of effort before trying some other line of attack. One way 
to circumvent this trouble is to make certain that no subgoal which is 
identical to or syntactically symmetric- to some goal dependent on it is 
expanded.. 

The main trouble in the application of this principle is that not 
only must the ss's of a formula which one hopes will reappear be computed 
and stored, but also all newly generated formulae must be compared with 
all the old formulae and their ss’s to detect a reoccurrence. Storage 
and running time requirements demand a careful regulation of the use of 
this principle. Its unrestricted application was probably an inhibiting 
factor in Gelernfcer's program. 

1.2.2.3. J, A,» Robinson’s Paper 

The work of J. A. Robinson [PlO] describes the Eerbrand proof pro¬ 
cedure in a manner which points out the essential components of a proof 
arrived at by this process. These are the key concepts of a proof set 
and a verification set. Using these notions I will attempt to point out 
in Section 2, how to combine the best ideas in each of the two approaches 
to mechanical theorem proving. 

1.2.2.3.1, Proof Set 


Let us consider the fvf in disjunctive normal form. I will use 
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a matrix such as: 

L 11 L I2 — 

L 21 L 22 L 2m 0 

t> 

p 

L’| 1 Li a # • . Ll. 
kl k2 km^ 

to represent the fvf in disjunctive normal fora, where the L r s are 
literals and the logical expression 

(ii^ V L^2 V ® *«) ^ (I>2i ^22 ^ c. *) ^ n * # 

is its interpretation., 

A proof of a theorem consists of a tautologous disjunction of sub¬ 
stitution instances of the rows of L, where the objects substituted are 
elements of H< (Eotice that a substitution instance of a single row 
say be included without the same substitution in the rest of L neces¬ 
sarily being included.) A proof set is a set of elements from H which 
results in a tautology upon complete instantiation of L (substitution 
instances of all possible legal n-tuples) and such that this property 
is lost if any element is deleted from the set. 

A verification set of conjunctions is a set of instances of rows 
of L whose disjunction is tautologous, and such that' if any conjunct is 
deleted, the disjunction is not tautologous. The Harbrand proof procedure 
is really a search for a verification set (which defines an accompanying 
proof set). The procedure calls for a complete search of the solution 
space of instantiations of rows of L to locate a verification 3et. For 
theorems of common interest the verification set is quite small (usually 
contains less than 100 elements), compared to the astronomical sire of 
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sets generated by instantiating the fvf over all. the elements of H whose 
level is lees than or equal to that o£ the appropriate proof set. 

J. A. Robinson [P10] has written a program which searches for a 
verification set x?hen given a proof set. Although he gives no times 
for the search which is made in this caae s I believe :‘.t must be quite 
slow, when operating on moderately large problems, for reasons I will 
state in Section 2. 

1.2.2.4. Summary 

We have seen that the Herbrana expansion proof procedure is a search 
for a small set of substitution instances of rows of the fvf matrix. 

She proof procedures which have used this expansion have attempted to 
find this set by substituting successive elements from a fixed order¬ 
ing of H. This technique has failed on large problems because the ele¬ 
ments of H which are needed come from too far along in the enumeration. 
Methods have been developed which reorder the enumeration to suit the 
theorem. These are the heuristic techniques of LTM. 

Thus far they have been used with the greatest effectiveness in 
Gelernter*s geometer. That this work did not attempt problems of a very 
difficult level will be the contention of the next section. 
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2- Proposal for a Theorem Prover 

In this section I propose a program for geometry theorem proving 
which vrill be attacking what 1 believe to be the obstacle which is immedi¬ 
ately before us on the way toward mechanical theorem proving: the selec¬ 
tion of a proof set. I believe that the solution of this problem will 
then permit work on the much more difficult one.of generating signifi¬ 
cant and true conjectures as candidate theorems to be proved. I think 
that another problem of considerable importance might possibly be solved 
cy the device next to be discussed; this is the problem of deciding what 
already proved theorems to "remember" to use as lemmas in further work. 

2.1. The Order of an Element of H 

The notion of the order of an element of E is closely related to 
that of level. E is again regarded as structured hierarchically by 
order, but the subclasses are slightly different than the levels. 

A composite form is a term of the form: 

Q f A^ i A,*;»• .A^j 

where @ is a function symbol, and the A*e are either individual, variables, 
constants, or composite forms. 

The Oth order of H is the set consisting of: . 

1. individual constants appearing in the fvf 

2. composite forms appearing in fvf containing no individual vari¬ 
able symbols. 

r+l 

II , the r-Mth order of H, is the set of all expressions of the fol¬ 
lowing forms, which haven't appeared in a lower order: 

1 • 0 [A^; A„ • >. A ] 

l z a 

where 0 is a function symbol appearing in the fvf and the A‘e 
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i 

are members of H for i £. r and at least one of the A’s is f rora 
H r , 

2 a 0 [A| 5 A 2 * * «A^] 

where © [ A.; A 0 *.*A 3 is a composite form appearing in the fvf 
,l 4 n 

•j 0 * 

with elements of B" fosr i< r substituted for its free variables, 

r 

and at least one of the substituted elements is from E « 

It is easy to show that H = U.°1 h. = 

3 3*0 j j=0 

justifying the phrase "nth order of If' since by the definition 
o£ elements of H 1 .11 oleneoto of H. ore contained in 
so H£ Uj_ q H j ; and every element of E appears in Uj_ qH. where 
k is the maximum depth of nesting of function symbols in the 
fvf. 

2*2. The Order of a Proof 

Let us define the order of a proof of a formula in Eerbrand expan¬ 
sion form as the order of the highest element of E which appears in veri¬ 
fication set for the formula. 

The concept of the order of a proof suggests itself as a measure 
of difficulty of a proof of a theorem* Of course, whether or not this 
is a good measure depends on what we consider to be difficult; it seems 
reasonable in the sense that it agrees with my own notions of what are 
more or less difficult proofs. 

I will attempt to evaluate this measure's performance as a filter 
for significant theorems* I have hopes that it will be the key to enabl¬ 
ing the computer to decide what theorems will be useful as lemmas. 
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2. 3. The Interpretation of E in Geometry 

In the case of theorems in geometry there is an interesting inter¬ 
pretation of the Herbrand universe* The elements of E whose order is 0 
correspond fcc the parts of the diagram one draws when given a statement 
of a theorem. The first order of the hierarchy consists of all the ele¬ 
ments which may oe made in one application of coma existential postulate 
to the elements of level 0. The higher orders are produced in a similar 
fashion from elements of the lower orders. 

rhe met is almost indisputable that those theorems in geometry 
which require more complicated added constructions for their proof are 
more difficult to prove* The order of an element in the added construc¬ 
tions can be estimated by finding the minimum number of operations (such 
as connecting two points, laying off a length) necessary to get it* 

Tne examples to follow will help to justify and illustrate this 
point. First, though, it is necessary to develop some more formalism* 

2.4. Many-Sorted Quantification Theory 

In geometry we speak of many kinds of entities: points, lines, angles, 
circles etc. The use of a many-sorted quantification theory greatly facil¬ 
itates proofs about systems of this kind. 

Certain codifications must be made to my formalism to adapt it to 
a many-sorted theory. Individual variables and constants will henceforth 
be given a number of primes to indicate the sort of object they stand 
for, e,g„, sc” will be an angle variable. 

To the definition of wff we must add the restriction (the type sob - 
■Sj-^but xqn criterio n) that each predicate symbol or function symbol appear¬ 
ing in a formula must have a consistent assignment of sort of variable 
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tc each argument position, that is, the same sort of object must appear 
in the nth argument position of (t> in its every occurrence.. In addition, 
each expression <p [A^; A^...3 where ^ is a given function symbol will 
always denote the same sort of individual. 

2.5. Examples 5 ' ' 

The angles opposite the equal sides of an isoceles triangle are equal . 

This theorem of elementary Euclidean geometry has several simple 
proofs [LI]. We shall examine two proofs of this theorem, only one of 
which requires a construction. The proofs will be given in the Herbrand 
expansion form. In doing this X hope to convince the reader of two 
things; (1) that the interpretation X give of H is correct, and (2) 
that the order of the proof set is a significant measure of the difficulty 
of a proof. 

The two proofs require different lemmas, and only those actually 
necessary will be included among the postulates in each proof, (X intend 
the term postulate to mean either an axiom or a previously proved theorem*) 
The sorts we are dealing with in these proofs are: points, line segments, 
angles, and triangles. These will be sorts 0, 1, 2, 3 respectively. 

" ” is a function from three points to a triangle, 5, C" is the predicate. 

"coiinear" and U £J : a function from three points to an angle.. The nota¬ 
tion "xy M is to indicate a function which maps tV70 points into a segment. 

” ~ " will denote all the relations of congruence (there can be no con¬ 
fusion about which one is meant). 

2.5.1. Proof without Construction 

In this example the theorem is proved by showing that the triangle 
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is congruent to itself flipped over by SS-S. The theorem in quantifies- 
tion theory is: 


(x)(y)(z)(u){v)(w)|[ A [x;y;s] S' A[u;v;wj => A[x;y;z] ~ ^(u;v;w]]a 
( x)(y)(z)(w)(v)(w)[<vCEs;y;s 3 a a#C[u;v;w] a xy » uw A sy s wv a 
xy« uv => & Ex;y;s] - a [u;v;w]j A (x)(y)(z)E'V Cf>.;y;z] D ^Cfx;s;yj ]a 
(x)(y)UyS F-'-i) D <x)(y)<s)[ ~ C[x;y;s] AxsS xy» X U;y;s] 3? ^Cxjsjy] 


The matrix derived from the fvf contains three functions of no arguments 
coming from the quantifiers in the conclusion of the main implication,, 

I will write them as "a", "b", and !, c". I have not rewritten bound vari 
ables since no conflicts are present. 


1« 

2, 


&[x;y;s]S aE«»v;w] 
*vC[x;y;z] 

X y«UV 


*v( A Ex;y;z3 - A [u;v;w]) 

^C[u;v;w] xz'^ww zy%K 

/v(A[x;y;z] Sfl[u;v;w] 


3. i*»C[x;y;s3 

4. |~ (xy ** yx) 

5 1 .. f 

* I 3k «• y 
6„ S C[a;b;c] 

7 V /v(ac so) 

8c <£.[a;b;c] '~"A[a;c;b] 


C[x;z;y] 

A/(y* 2 x’) 


A single instance of each row* or 8 conjuncts, is sufficient to 


establish the theorem. These ares 
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£s>(a;b;c3: 

= & [a;c;bj <v£-[a;b;c] a .a [s;c:b] 

1: 

a/a y/b s/c u/a v/c w/b 

A.C[a;b : .;c] 

A>C[a;c;b] 

ac^&b 

ah-be sb=ac 


a, &,ta:b;c] S &[a;e;b3 

2 ! 

same 

«vC[a;b;c] 

C[a;c;b] 

3; 

same 

*vcb Qi dc 


4: 

x/c y/b 

ac 3 ab 

i A** 

^ ab ss ac 

5: 

x 1 /ac y*/ab 


and rows 6, ?, 8. 


Abbreviating: 


A [a;b;c] aALajcjb] 

by 

A 

L. [a;b;c] S 4. [a;c;b] 

by 

E 

C[a;b;c] 

by 

C 

C[a;c;b] 

by 

D 

ac = ab 

by 

E 

cb = be 

by 

F 

ab~ ac 

by 

G 

gives : 

(A a B) V (CaDaEaFaGa vA)V (<vCAD) V /v ? v'(EA^G)v'C V^E VB 

which is a tautology. 

The Oth order elamenta 

of H 

for this proof are: 

a b c ac ab 4la;b;c] 

<£[a 

;c;b]. 

The 1st order elements are: 

ba ca cb be &[a;b;e] 

A [a 

;c;b] Afb;a;e] A[b;c;a] A[c;a;bj 

A [c jb;a] 4(b;a;c] 

J. 

[b;c;a] £.[e;a;b] A[c;b;a]. 


The higher orders are vacuous. 

Since the proof requires elements from the 1st order, it is a let 


order proof 
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io 

2 , 

3, 

h* 

3 0 

6, 

7 

a 

9 

10 

11 

12 

13 0 

14, 

15 

16, 

17. 


y i s A/B[y;£fx;y;z] ;s] 

y f z £[x;y;s] - y 

y a £[s;y;s3 - ?- 

y •/ a «vf[s;y;s]y ~ £[x;y;z]z 

'vC[x;y;sl /*e[u;v;w3 xz - aw sy - wr xy 
u y u F 3 C[u;y;zJ 

u # y u s’ a 'vC[x;y;s] C[u;yja] 

S[y;u;z3 ^Cfu^yjs] 

A[x;y;z] » ^[u;v;w] ^[x;y;z] = £[u;v;w] 

A.Gtx;y;a3 y - s 

B[y;u;z3 ^<C.l3t;y;u] £iS.[:c;y;E3 

B[y;u;s3 &4.[x;z;y] 

2 


= uv <^[x;y;s3 % a[u;v;w1 
C[x;y;u] 

C[:;;s;u] 


x =* y 


2 2 
U a V 


2 2 
X = u 


2 / 2 
y r u 


i * 

y 


X' 


X f 


C[a;b;c] 

*ab jc sc 

^.[a;b;c3 =’^.[a;c;b3 


The function symbol "£" which has been introduced into the fvf comes 
from the existential quantifier ia the first postulate. Three constant 
symbols, "a *', **b 5 *, and "c" come from the universal quantifiers ia the 
statement of the theorem, I will abbreviate £[a;b;c] by s. 
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b ■/ c 

B[b;s;cJ 

I o rju y/b s/c 

b / c 

S - D 

2* sane 

b ~f c 

S ■ = c 

3. sane 

h j- c 

t ^ 

ED 3 GC 

4„ sane 

'vC[a;b;s3 

‘'«e[a;c:s] as '= as sb = sc ab 

/V 

: = ac 

'<-'4 [a; 

b;s] £ &[a;c;s] 

5„ x/a y/b s/c a/a v/c w/s 

s b 

s -/ c /\»C[a;b;c] C[s;b;c] 

C[a;b;sj 



6, x/a y/b z/c u/s 

sib 

3 i- c A43[a;b;c3 C[G;b;c] 

C[a;c;s] 


- 

7, y/b u/s s/c 

B[b;s;c] 

-%»C[s;b;c3 

8, same 

&[a;b;s3 = 

• a.[a;c;s3 A4[a;b;s] = i.[a:c;sj 

9* x/a y/b z/c u/a v/c w/b 

<vC[a;b;c3 

b = c 

10* x/a y/b z/c 

B[b;s;c] 

<-W_ [ a ;b;s ] = L {a;b;c3 

11* x/a y/b z/c u/s 

B[b;s;c] 

fa;c;s]^ l. Ia;c;b3 

12* same 

L [a;b;s3 = 

/L[a;b;c] ^[ajcjs] ^ i-[a;c;b3 

{a;b;s] «^{a;c;s3 

? ? * 

/vz.[a;b;c3 =4.[a;c;b] 

13. ic /£[a;b;s] y/ 4 .[a;b;c] 



u 2 4Ata;c;sl v 2 /4ja;c 

Af 

as = as 


14 * x* /as 

C[a;b;c] 


15, 

/vab -Is ac 


16, 

L [a;bjc] = 

4.{a;c;b3 

17,. 


The disjunction of these row instances can be verified as tautologous. 





There are, however 


In Che matrix there are no true constants, 
functions of no arguments: "a", '"o'*, and M c”. Among the composite forms 
are: 

f[x;y;s] f[x;y;e]y xy &[x;y;s3 <£[x;y;z] 

Elements of H which appear in the verification set are? 
a b c ab ac £[a:b;c] 4.[a;c;b] 

(the entire Oth order of II). 

f[a;b;c] (abbreviated as ”s t5 )> a single 1st order element 

and 

as sb sc &[a;b; 0 ] A[a;c;sj <£.[a;b;o] £[a;c;a] 

from the 2nd order. 

This is a 2nd order proof. 

2,6. Finding a Proof Given a Proof Set 

Since only the postulates which were actually necessary for the proofs 
were included in these examples, the Herbrand universe Isas much smaller 
than it would ordinarily be (even finite in the first example) and the 
problem of selecting which elements to work with in searching for a 
proof is correspondingly less difficult, 

Gelernter's program is given a list of all the points, line segments 
etc. involved in the proof it is to generate, with one minor exception; 
the program can add a line segment which connects two points which it 
already knows about. Essentially, then, Gelerater's program searches 
for a proof already knowing the proof set (with the noted exception), 
i.e., those elements it is given along with the theorem to be proved. 
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J, A* Robinson has also written a program to find a proof given a 
proof set. My reeling is that this heuristically unsophisticated pro¬ 
gram which generates all substitution instances of the fvf to produce 
proofs of Oth order theorems would be incapable of proving theorems in 
a reasonable time when large numbers of postulates are available* The 
fact that bio program proved seme interesting theorems when the set of 
postulates was restricted (as in my examples) misleadingly seems to 
indicate that the task is easy. The fact that Gelernter’s program 
(which 1 consider an able effort) takes many minutes to solve problems 
of comparable difficulty is also evidence that the problem is not trivial. 

2 J. Proposal; A Program to Find High Order Proofs 

I propose to write a program which will produce high order proofs 
in geometry, it will work by first selecting a set of elements which 
seem likely to be useful s and then apply the techniques which have been 
developed for finding a proof given a proof set to search for a verifica¬ 
tion set. 

The goal I hope to reach is the ability to produce proofs of the 
theorems in Foundations of Euclidean Geometry [L1J. [L6 contains a 

formalisation of some of Ll.3 This contains an axiomatic development 
of plane geometry up to about the level of Euclid's Elements . 

There are three major areas ia which my efforts must be spent. First, 
the Oth order proof heuristics must be translated so as to apply to for¬ 
mulas expressed in Herbrand's form. Second, a diagram generator must be 
programmed. This was never dons by Geiernter, and is not a simple task. 
Last, and most difficult, will be the development of effective techniques 
for finding the set of elements necessary for a proof. 
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